You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@subversion.apache.org by Stefan Sperling <st...@elego.de> on 2017/06/30 14:10:59 UTC
1.8.x vote urgently needed!
We need an additional vote now in order to roll a 1.8 tarball today.
Can anyone help?
* r1785737, r1785738, r1785734, r1786447, r1785754, r1786445, r1786446, r1786515, r1794611, r1800387
Make FSFS consistency no longer depend on hash algorithms.
Justification:
This eliminates any existing or future FSFS vulnerability due to
attacks on MD5 or SHA1.
Branch:
^/subversion/branches/1.8.x-strict-rep-sharing
Notes:
Depends on r1759116 for correctness with older APR.
While the backport code is very close to the /trunk changes, it is
easier to review them as r1787637, r1787638 and r1787652 on the branch.
[Will create a text conflict with the r1785053 backport. Depending on
which change gets merged first, the respective other must be updated.]
r1800387 did the above merge and resolved the text conflicts.
Votes:
+1: stefan2, stsp
-1: rhuijben (Until some additional fix like on 1.9 is applied. After that +1
on the current changes)
Re: 1.8.x vote urgently needed!
Posted by Stefan Fuhrmann <st...@apache.org>.
On 30.06.2017 16:38, Daniel Shahaf wrote:
> Stefan Sperling wrote on Fri, 30 Jun 2017 16:10 +0200:
>> We need an additional vote now in order to roll a 1.8 tarball today.
>>
>> Can anyone help?
>>
>> * r1785737, r1785738, r1785734, r1786447, r1785754, r1786445, r1786446, r1786515, r1794611, r1800387
>> Make FSFS consistency no longer depend on hash algorithms.
>> Justification:
>> This eliminates any existing or future FSFS vulnerability due to
>> attacks on MD5 or SHA1.
>> Branch:
>> ^/subversion/branches/1.8.x-strict-rep-sharing
>> Notes:
>> Depends on r1759116 for correctness with older APR.
>> While the backport code is very close to the /trunk changes, it is
>> easier to review them as r1787637, r1787638 and r1787652 on the branch.
>> [Will create a text conflict with the r1785053 backport. Depending on
>> which change gets merged first, the respective other must be updated.]
>> r1800387 did the above merge and resolved the text conflicts.
>> Votes:
>> +1: stefan2, stsp
>> -1: rhuijben (Until some additional fix like on 1.9 is applied. After that +1
>> on the current changes)
>
> Note that stefan2's and rhuijben's votes should be marked "(without r1800387)".
I updated my vote.
-- Stefan^2.
Re: 1.8.x vote urgently needed!
Posted by Daniel Shahaf <d....@daniel.shahaf.name>.
Stefan Sperling wrote on Fri, 30 Jun 2017 16:10 +0200:
> We need an additional vote now in order to roll a 1.8 tarball today.
>
> Can anyone help?
>
> * r1785737, r1785738, r1785734, r1786447, r1785754, r1786445, r1786446, r1786515, r1794611, r1800387
> Make FSFS consistency no longer depend on hash algorithms.
> Justification:
> This eliminates any existing or future FSFS vulnerability due to
> attacks on MD5 or SHA1.
> Branch:
> ^/subversion/branches/1.8.x-strict-rep-sharing
> Notes:
> Depends on r1759116 for correctness with older APR.
> While the backport code is very close to the /trunk changes, it is
> easier to review them as r1787637, r1787638 and r1787652 on the branch.
> [Will create a text conflict with the r1785053 backport. Depending on
> which change gets merged first, the respective other must be updated.]
> r1800387 did the above merge and resolved the text conflicts.
> Votes:
> +1: stefan2, stsp
> -1: rhuijben (Until some additional fix like on 1.9 is applied. After that +1
> on the current changes)
Note that stefan2's and rhuijben's votes should be marked "(without r1800387)".